As a Fleet user, I'd like to build queries that can return information about GCP instance metadata like I'm able to do with my Azure and E2 instances today.
There is an open issue at osquery to add support for a gcp_instance_metadata table, but there has not been any activity on it in over a year.
Potential solutions
Add gcp_instance_metadata table to Fleet data tables so GCP instance metadata can be queried the same as Azure and E2 instances can be today.
The Github issue suggests metadata for a GCP instance can be collected with a curl command which means it could potentially be scripted. This solution is not ideal as data could not be obtained in the same way as Azure or EC2. Additionally, the curl osquery table cannot be used as a workaround since GCP requires Metadata-Flavor: Google as a header and the curl table does not support headers.
Problem
As a Fleet user, I'd like to build queries that can return information about GCP instance metadata like I'm able to do with my Azure and E2 instances today.
There is an open issue at osquery to add support for a
gcp_instance_metadata
table, but there has not been any activity on it in over a year.Potential solutions
gcp_instance_metadata
table to Fleet data tables so GCP instance metadata can be queried the same as Azure and E2 instances can be today.curl
command which means it could potentially be scripted. This solution is not ideal as data could not be obtained in the same way as Azure or EC2. Additionally, thecurl
osquery table cannot be used as a workaround since GCP requiresMetadata-Flavor: Google
as a header and thecurl
table does not support headers.